Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/147dad6d-b32a-3fa7-85ce-91a01dc084ff.roa
File:                     147dad6d-b32a-3fa7-85ce-91a01dc084ff.roa (raw, json)
Hash identifier:          E68YW5AN2BQC0tz5HMPSblVqmNwEkLS/zqNb7Ap+aOY=
Subject key identifier:   44:62:E7:2D:61:1E:39:A4:C1:FE:AD:33:4B:D4:EC:2A:22:A9:59:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584828096B6671B2175B18521780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/147dad6d-b32a-3fa7-85ce-91a01dc084ff.roa
Signing time:             Tue 10 Dec 2024 04:18:12 +0000
ROA not before:           Tue 10 Dec 2024 04:18:12 +0000
ROA not after:            Mon 10 Mar 2025 03:18:12 +0000
asID:                     13335
IP address blocks:        162.158.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:09:6b:66:71:b2:17:5b:18:52:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:18:12 2024 GMT
            Not After : Mar 10 03:18:12 2025 GMT
        Subject: CN=66f40e59-c251-4318-9fab-16326211a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:b1:c4:aa:61:de:58:eb:c2:0c:46:b8:23:
                    4a:ac:56:b9:c9:a0:8b:f3:0a:46:25:fb:42:cb:56:
                    bf:5f:fb:0a:78:05:91:4a:5c:c9:42:60:eb:95:e6:
                    d2:bd:d9:28:08:99:20:69:94:7b:a9:d6:8d:39:fb:
                    a4:e7:d1:1a:de:f6:f1:42:91:5c:88:24:32:7d:82:
                    75:d8:0e:86:53:c0:88:3d:5f:17:9e:28:e9:f2:63:
                    55:f0:48:be:f3:5c:c3:bc:b2:1a:b8:44:4a:8c:f8:
                    69:36:68:54:65:8b:c7:a9:40:86:36:6e:bc:2c:6e:
                    fe:22:8c:d6:2b:4c:b4:59:0f:79:34:01:18:db:5a:
                    9c:f5:c3:62:00:f7:93:75:48:1b:f8:a2:19:59:6f:
                    2f:00:47:6a:a1:e5:46:29:fb:17:7a:d0:cd:3e:e9:
                    26:bb:5b:b2:e2:66:3d:84:07:e3:60:24:8a:8d:e7:
                    cc:0c:7c:00:ca:e6:92:b3:9a:5c:dd:58:a7:1a:14:
                    9e:08:ea:b7:83:86:98:c3:46:57:3b:b2:19:55:a9:
                    9f:79:cd:8e:93:5a:a6:94:ff:56:29:6a:f7:27:a2:
                    af:2f:f9:18:9e:55:df:3c:eb:65:45:cd:f2:6d:a2:
                    10:b7:94:94:b3:83:8d:3e:a2:ee:01:69:3c:ea:73:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:E7:2D:61:1E:39:A4:C1:FE:AD:33:4B:D4:EC:2A:22:A9:59:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/147dad6d-b32a-3fa7-85ce-91a01dc084ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:6e:dd:86:89:12:ec:e5:c9:75:4c:64:d6:64:66:18:95:
         64:52:d6:82:b4:05:e5:0f:d8:e7:94:78:ff:33:ca:4d:4a:a9:
         c9:e5:fb:fc:96:00:fa:39:79:ab:26:d0:c8:59:09:97:55:f1:
         4f:73:63:c5:03:65:ed:28:6d:3e:88:b1:60:26:46:19:e3:7f:
         99:f3:64:cc:7d:1f:7b:b0:b9:d9:c9:9a:d5:bf:a5:cb:03:3e:
         5c:6b:fb:4a:1d:48:81:ff:55:0c:a7:0e:cc:dd:1b:d2:6b:28:
         2c:86:ad:8d:94:3f:a0:51:df:aa:4c:13:29:52:c6:a9:ee:6c:
         57:1e:bc:06:9f:ea:ce:62:29:c7:cf:4c:fe:c1:9b:0a:3e:52:
         f6:28:d5:16:76:2c:06:08:9b:fe:01:f7:ae:70:e3:42:ae:c9:
         1d:49:9c:c9:01:77:ac:9d:07:e1:45:00:14:f5:f3:4d:ca:06:
         b1:c3:42:9b:c7:45:7e:5b:31:98:19:f5:af:4f:3e:7c:e9:37:
         52:68:64:41:c4:a4:0f:bf:7b:f0:47:e0:7d:9c:35:d5:09:ec:
         54:34:71:0f:c8:c6:5b:27:27:67:2a:29:2d:78:42:74:f7:f0:
         2a:2f:22:d7:c1:60:79:41:98:5a:08:2b:0c:82:0c:f6:86:04:
         4a:38:28:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoCWtmcbIXWxhSF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MTgxMloXDTI1MDMxMDAzMTgxMlowLzEtMCsGA1UEAxMk
NjZmNDBlNTktYzI1MS00MzE4LTlmYWItMTYzMjYyMTFhMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnixxKph3ljrwgxGuCNKrFa5yaCL8wpGJftC
y1a/X/sKeAWRSlzJQmDrlebSvdkoCJkgaZR7qdaNOfuk59Ea3vbxQpFciCQyfYJ1
2A6GU8CIPV8Xnijp8mNV8Ei+81zDvLIauERKjPhpNmhUZYvHqUCGNm68LG7+IozW
K0y0WQ95NAEY21qc9cNiAPeTdUgb+KIZWW8vAEdqoeVGKfsXetDNPukmu1uy4mY9
hAfjYCSKjefMDHwAyuaSs5pc3VinGhSeCOq3g4aYw0ZXO7IZVamfec2Ok1qmlP9W
KWr3J6KvL/kYnlXfPOtlRc3ybaIQt5SUs4ONPqLuAWk86nMxiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERi5y1hHjmkwf6tM0vU7CoiqVkTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQ3ZGFkNmQtYjMyYS0z
ZmE3LTg1Y2UtOTFhMDFkYzA4NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALImbt2GiRLs5cl1TGTWZGYYlWRS1oK0BeUP2OeUeP8zyk1Kqcnl+/yW
APo5easm0MhZCZdV8U9zY8UDZe0obT6IsWAmRhnjf5nzZMx9H3uwudnJmtW/pcsD
Plxr+0odSIH/VQynDszdG9JrKCyGrY2UP6BR36pMEylSxqnubFcevAaf6s5iKcfP
TP7Bmwo+UvYo1RZ2LAYIm/4B965w40KuyR1JnMkBd6ydB+FFABT1803KBrHDQpvH
RX5bMZgZ9a9PPnzpN1JoZEHEpA+/e/BH4H2cNdUJ7FQ0cQ/IxlsnJ2cqKS14QnT3
8CovItfBYHlBmFoIKwyCDPaGBEo4KCI=
-----END CERTIFICATE-----